| # ============================================== |
| # Policy File of /system/binboot_logo_updater Executable File |
| |
| |
| # ============================================== |
| # Type Declaration |
| # ============================================== |
| |
| type boot_logo_updater_exec , exec_type, file_type; |
| type boot_logo_updater ,domain; |
| |
| # ============================================== |
| # Android Policy Rule |
| # ============================================== |
| |
| # ============================================== |
| # NSA Policy Rule |
| # ============================================== |
| |
| # ============================================== |
| # MTK Policy Rule |
| # ============================================== |
| |
| init_daemon_domain(boot_logo_updater) |
| |
| |
| # Date : WK14.31 |
| # Operation : Migration |
| # Purpose : for L early bring up. |
| allow boot_logo_updater logo_block_device:blk_file { read open }; |
| allow boot_logo_updater mmcblk0_block_device:blk_file { open read }; |
| |
| |
| # Date : WK14.32 |
| # Operation : Migration |
| # Puration : set boot reason |
| allow boot_logo_updater system_prop:property_service set; |
| |
| # Date : WK14.43 |
| # Operation : Migration |
| # Puration : for policy migration |
| allow boot_logo_updater graphics_device:chr_file { read write ioctl open }; |
| allow boot_logo_updater init:unix_stream_socket connectto; |
| allow boot_logo_updater logo_device:chr_file { read open }; |
| allow boot_logo_updater property_socket:sock_file write; |
| allow boot_logo_updater self:capability dac_override; |
| allow boot_logo_updater sysfs:file write; |
| allow boot_logo_updater block_device:dir search; |
| allow boot_logo_updater graphics_device:dir search; |
| allow boot_logo_updater mtd_device:chr_file { open read }; |
| allow boot_logo_updater mtd_device:dir search; |
| |
| # Date : WK15.30 |
| # Operation : Migration |
| # Purpose : for device bring up, not to block early migration/sanity |
| allow boot_logo_updater device:dir write; |
| allow boot_logo_updater kmsg_device:chr_file w_file_perms;; |
| allow boot_logo_updater proc_lk_env:file rw_file_perms; |
| |